This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa File: kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa (raw, json) Hash identifier: wZEOFTFIMct/33jsnIoNoec+GVySts9zmn8n8Vg4eB8= Subject key identifier: 90:B5:0C:D5:80:0E:31:C1:DF:1B:99:0F:07:97:2D:31:E4:3A:CC:EE Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5 Certificate serial: 019B7F141AEE80B22EE4DF5CE305348DF9C6 Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa Signing time: Fri 02 Jan 2026 14:19:42 +0000 ROA not before: Fri 02 Jan 2026 14:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60111 IP address blocks: 185.125.220.0/22 maxlen: 22 2a02:5c20::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:1a:ee:80:b2:2e:e4:df:5c:e3:05:34:8d:f9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5 Validity Not Before: Jan 2 14:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90b50cd5800e31c1df1b990f07972d31e43accee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:42:41:57:3b:6d:86:a9:5e:a1:7e:4d:b4: 14:57:95:b7:8e:0a:96:eb:22:56:d7:76:bc:aa:75: 4c:44:4b:27:72:77:85:35:0d:7d:f8:86:12:70:93: 23:57:db:e1:8c:3d:62:0f:dd:5f:25:f6:2b:8e:74: c7:65:df:53:da:59:14:e9:1f:76:15:c7:8c:7b:63: 87:f9:f4:a5:f1:31:3e:08:56:79:11:9c:a8:5b:ed: 47:55:d9:5d:ea:81:87:88:87:43:11:0d:e3:06:68: 27:be:97:ab:78:e8:b2:51:24:21:f7:0d:9d:ad:21: e3:71:31:3d:6b:23:ec:a1:bd:97:44:9d:b8:27:31: 40:89:5e:ae:35:84:f9:5c:0b:68:ae:a8:ed:31:c6: 75:3c:d6:68:eb:d5:04:0e:78:1f:a5:54:fe:45:56: 00:ea:33:07:4a:b6:64:77:43:54:16:b6:09:87:8b: b2:86:3b:12:3b:4f:81:44:96:94:e1:0c:2d:e1:c9: 19:5e:85:44:a3:af:4a:b6:09:d0:3a:eb:5e:6f:11: 5a:20:ea:47:a4:14:b6:42:f6:62:94:36:ab:e2:89: 71:ce:a1:fc:73:e5:c1:cd:60:72:15:c8:ca:23:6c: c3:e1:8e:0e:82:da:2f:78:3e:4d:99:70:89:57:73: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B5:0C:D5:80:0E:31:C1:DF:1B:99:0F:07:97:2D:31:E4:3A:CC:EE X509v3 Authority Key Identifier: keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.220.0/22 IPv6: 2a02:5c20::/29 Signature Algorithm: sha256WithRSAEncryption a6:3e:58:7d:48:60:11:13:79:13:1a:33:a3:82:06:e6:de:61: bd:7f:a2:ed:d4:cc:a6:d7:b9:cc:75:a1:81:97:4e:4c:52:0a: 9c:32:c2:46:0d:53:1b:c2:d3:e7:61:3a:91:8b:53:2d:87:ff: da:f8:9a:71:ae:9e:1a:a5:ec:27:ba:b2:6a:f1:ba:a7:55:1a: 2e:f4:28:e9:0e:3c:cd:99:5a:d5:b8:f0:5a:1c:18:0b:d6:2d: d3:c9:12:d7:e8:2a:97:dc:0d:11:af:00:27:80:0f:a4:75:7f: 2e:bf:0c:d7:02:c7:a2:ee:be:06:78:13:96:46:62:f8:2f:41: 57:26:f5:44:b7:6b:af:08:64:50:b8:71:03:d3:a8:0c:29:8d: 39:55:9a:40:2b:fd:e3:89:99:f7:30:bc:06:e4:2a:54:80:58: 05:c7:31:f9:34:09:1c:16:b2:2e:9a:86:f4:d6:73:d7:f4:a5: 68:7d:bc:c2:42:27:f8:8a:47:ed:af:65:6d:c5:ac:4a:34:14: 96:0e:48:76:42:28:64:14:e9:3b:c7:82:51:5a:24:da:da:a9: 5a:61:47:25:99:58:ea:d4:d4:7e:85:88:77:d6:d0:2c:30:9c: c4:15:4b:c6:22:e1:a3:e3:1c:a6:75:13:70:d6:51:a8:24:1e: 03:ab:5d:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FBrugLIu5N9c4wU0jfnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MjFiMGI3ZGZhMGE3ODg4Zjc1ZWZmMjBmMzIxNDVhMGIz ZjBkZDUwHhcNMjYwMTAyMTQxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGI1MGNkNTgwMGUzMWMxZGYxYjk5MGYwNzk3MmQzMWU0M2FjY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W1CQVc7bYapXqF+TbQUV5W3jgqW 6yJW13a8qnVMREsncneFNQ19+IYScJMjV9vhjD1iD91fJfYrjnTHZd9T2lkU6R92 FceMe2OH+fSl8TE+CFZ5EZyoW+1HVdld6oGHiIdDEQ3jBmgnvpereOiyUSQh9w2d rSHjcTE9ayPsob2XRJ24JzFAiV6uNYT5XAtorqjtMcZ1PNZo69UEDngfpVT+RVYA 6jMHSrZkd0NUFrYJh4uyhjsSO0+BRJaU4Qwt4ckZXoVEo69KtgnQOutebxFaIOpH pBS2QvZilDar4olxzqH8c+XBzWByFcjKI2zD4Y4OgtoveD5NmXCJV3MTsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJC1DNWADjHB3xuZDweXLTHkOszuMB8GA1UdIwQY MBaAFIYhsLffoKeIj3Xv8g8yFFoLPw3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGlHd3Q5LWdwNGlQZGVfeUR6SVVXZ3NfRGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYTA1NzktYTFlNy00YjI0LTgwMzMt NmIzZTBhYTJjYmIyLzEva0xVTTFZQU9NY0hmRzVrUEI1Y3RNZVE2ek80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iYTA1NzktYTFlNy00YjI0LTgwMzMtNmIzZTBhYTJjYmIy LzEvaGlHd3Q5LWdwNGlQZGVfeUR6SVVXZ3NfRGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX3cMA0E AgACMAcDBQMqAlwgMA0GCSqGSIb3DQEBCwUAA4IBAQCmPlh9SGARE3kTGjOjggbm 3mG9f6Lt1Mym17nMdaGBl05MUgqcMsJGDVMbwtPnYTqRi1Mth//a+Jpxrp4apewn urJq8bqnVRou9CjpDjzNmVrVuPBaHBgL1i3TyRLX6CqX3A0RrwAngA+kdX8uvwzX Asei7r4GeBOWRmL4L0FXJvVEt2uvCGRQuHED06gMKY05VZpAK/3jiZn3MLwG5CpU gFgFxzH5NAkcFrIumob01nPX9KVofbzCQif4ikftr2VtxaxKNBSWDkh2QihkFOk7 x4JRWiTa2qlaYUclmVjq1NR+hYh31tAsMJzEFUvGIuGj4xymdRNw1lGoJB4Dq10d -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:44 2026 by rpki-client